Thinking that it's a bit tricky... For example if you import testrealm.json with demo example, the direct grants will be enabled for all clients, but at the same time the switch for newly created clients will be disabled. Looks strange to me.Implicit is disabled, but direct grant is enabled by default. This is just for backwards compatibility, as in 1.6, we have direct grant defacto enabled for all clients. If we want to have it disabled by default, we should add big note to migration docs. Or we can have it enabled for all clients migrated from previous version, but keep the switch "off" in admin console for new clients?Is direct grant and implicit disabled by default?
On for old, off for new works for me.
+1 for admin-cli client.
At least, we have people, who wants to login into admin REST API by default (without need to go to admin-console UI first and enable direct grant for some client), so I guess this possibility should be still kept.
In reality they should not be using the admin console client to do so. They should create a separate client for it I think. We need to sort out some sort of bootstrapping for it though. Or maybe we have a admin-cli client?